CVE-2024-33807

The campcodes Complete Web-Based School Management System 1.0 is vulnerable to a SQL injection vulnerability in the /model/get_teacher_timetable.php API endpoint. An attacker can exploit this flaw by providing malicious input via the grade parameter to execute arbitrary SQL commands. To mitigate ...